AWS Certified Cloud Practitioner (CLF-C02) — Question 194

Which AWS service is used to track, record, and audit configuration changes made to AWS resources?

Answer options

• A. AWS Shield
• B. AWS Config
• C. AWS IAM
• D. Amazon Inspector

Correct answer: B

Explanation

AWS Config is specifically designed to monitor and record configuration changes to AWS resources, making it the correct choice. AWS Shield is focused on DDoS protection, AWS IAM manages user access and permissions, and Amazon Inspector is used for security assessments, none of which track configuration changes.